c870d429558429feb90acea25ab37873

Sharing

Copy URL Twitter E-mail

General

Target
c870d429558429feb90acea25ab37873
Size 344KB
Sample240314-mxtnnacd64
SHA256 9314cf94eb40d3b181df52d28224193a3da2f42badda95b6ea70f775d3d78cc2
MD5 c870d429558429feb90acea25ab37873
SHA1 f4bdffff1ce66eddd1501014f763c557bbdeecc0
SHA512 7c1413f0742cf4028607725d1523ccd8a221ab1ef6c157b8e1c733a1bb50bd472bf502c6e9d7df65649f20b083ff4c9a1949c2514df83470f5e2aa91b2cde7d9
SSDEEP 6144:sCUR6wdhHJGKfCO3isEpuXHU/816AyWGvgQcmJg1VYewXw5sMRV:s1QSFNfl3iluE/815Gotag3YG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c870d429558429feb90acea25ab37873

File Explorer

c870d429558429feb90acea25ab37873

.exe 344KB

c870d429558429feb90acea25ab37873

SHA256 9314cf94eb40d3b181df52d28224193a3da2f42badda95b6ea70f775d3d78cc2
MD5 c870d429558429feb90acea25ab37873
SHA1 f4bdffff1ce66eddd1501014f763c557bbdeecc0
SHA512 7c1413f0742cf4028607725d1523ccd8a221ab1ef6c157b8e1c733a1bb50bd472bf502c6e9d7df65649f20b083ff4c9a1949c2514df83470f5e2aa91b2cde7d9
SSDEEP 6144:sCUR6wdhHJGKfCO3isEpuXHU/816AyWGvgQcmJg1VYewXw5sMRV:s1QSFNfl3iluE/815Gotag3YG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

942081

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

@$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$26Shdocvw_tlb@TCppWebBrowser @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$28Shdocvw_tlb@TCppShellWindows @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppShellUIHelper @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$29Shdocvw_tlb@TCppWebBrowser_V1 @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppCScriptErrorList @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$32Shdocvw_tlb@TCppInternetExplorer @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$33Shdocvw_tlb@TCppSearchAssistantOC @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$34Shdocvw_tlb@TCppShellBrowserWindow @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @$xp$36Shdocvw_tlb@TShellFavoritesNameSpace @@Shdocvw_ocx@Finalize @@Shdocvw_ocx@Initialize @@Unit1@Finalize @@Unit1@Initialize @@Unit2@Finalize @@Unit2@Initialize @@Unit3@Finalize @@Unit3@Initialize @@Unit4@Finalize @@Unit4@Initialize @@Unit5@Finalize @@Unit5@Initialize @@Unit6@Finalize @@Unit6@Initialize @Shdocvw_ocx@Register$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@ @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppCScriptErrorList@BeforeDestruction$qqrv @Shdocvw_tlb@TCppCScriptErrorList@Connect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@ConnectTo$qqr91%TComInterface$28Shdocvw_tlb@IScriptErrorListpx5_GUID$e&@Shdocvw_tlb@IID_IScriptErrorList$% @Shdocvw_tlb@TCppCScriptErrorList@Disconnect$qqrv @Shdocvw_tlb@TCppCScriptErrorList@GetDefaultInterface$qv @Shdocvw_tlb@TCppCScriptErrorList@GetDunk$qqrv @Shdocvw_tlb@TCppCScriptErrorList@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@ @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppInternetExplorer@BeforeDestruction$qqrv @Shdocvw_tlb@TCppInternetExplorer@Connect$qqrv @Shdocvw_tlb@TCppInternetExplorer@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppInternetExplorer@Disconnect$qqrv @Shdocvw_tlb@TCppInternetExplorer@GetDefaultInterface$qv @Shdocvw_tlb@TCppInternetExplorer@GetDunk$qqrv @Shdocvw_tlb@TCppInternetExplorer@InitServerData$qqrv @Shdocvw_tlb@TCppInternetExplorer@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@ @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppSearchAssistantOC@BeforeDestruction$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@Connect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@ConnectTo$qqr97%TComInterface$31Shdocvw_tlb@ISearchAssistantOC3px5_GUID$e&@Shdocvw_tlb@IID_ISearchAssistantOC3$% @Shdocvw_tlb@TCppSearchAssistantOC@Disconnect$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@GetDefaultInterface$qv @Shdocvw_tlb@TCppSearchAssistantOC@GetDunk$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InitServerData$qqrv @Shdocvw_tlb@TCppSearchAssistantOC@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@ @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellBrowserWindow@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@Connect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@ConnectTo$qqr83%TComInterface$24Shdocvw_tlb@IWebBrowser2px5_GUID$e&@Shdocvw_tlb@IID_IWebBrowser2$% @Shdocvw_tlb@TCppShellBrowserWindow@Disconnect$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellBrowserWindow@GetDunk$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InitServerData$qqrv @Shdocvw_tlb@TCppShellBrowserWindow@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@ @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellUIHelper@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellUIHelper@Connect$qqrv @Shdocvw_tlb@TCppShellUIHelper@ConnectTo$qqr87%TComInterface$26Shdocvw_tlb@IShellUIHelperpx5_GUID$e&@Shdocvw_tlb@IID_IShellUIHelper$% @Shdocvw_tlb@TCppShellUIHelper@Disconnect$qqrv @Shdocvw_tlb@TCppShellUIHelper@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellUIHelper@GetDunk$qqrv @Shdocvw_tlb@TCppShellUIHelper@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@ @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppShellWindows@BeforeDestruction$qqrv @Shdocvw_tlb@TCppShellWindows@Connect$qqrv @Shdocvw_tlb@TCppShellWindows@ConnectTo$qqr85%TComInterface$25Shdocvw_tlb@IShellWindowspx5_GUID$e&@Shdocvw_tlb@IID_IShellWindows$% @Shdocvw_tlb@TCppShellWindows@Disconnect$qqrv @Shdocvw_tlb@TCppShellWindows@GetDefaultInterface$qv @Shdocvw_tlb@TCppShellWindows@GetDunk$qqrv @Shdocvw_tlb@TCppShellWindows@InitServerData$qqrv @Shdocvw_tlb@TCppShellWindows@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser@CControlData @Shdocvw_tlb@TCppWebBrowser@ClientToWindow$qqrpit1 @Shdocvw_tlb@TCppWebBrowser@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser@EventDispIDs @Shdocvw_tlb@TCppWebBrowser@ExecWB$qqr20Shdocvw_tlb@OLECMDID25Shdocvw_tlb@OLECMDEXECOPTp10tagVARIANTt3 @Shdocvw_tlb@TCppWebBrowser@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser@GetProperty$qqrpb @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GetWordBoolProp$qqri @Shdocvw_tlb@TCppWebBrowser@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser@Navigate2$qqrp10tagVARIANTt1t1t1t1 @Shdocvw_tlb@TCppWebBrowser@OptParam @Shdocvw_tlb@TCppWebBrowser@PutProperty$qqrpb10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@QueryStatusWB$qqr20Shdocvw_tlb@OLECMDID @Shdocvw_tlb@TCppWebBrowser@Quit$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@SetWordBoolProp$qqrio @Shdocvw_tlb@TCppWebBrowser@ShowBrowserBar$qqrp10tagVARIANTt1t1 @Shdocvw_tlb@TCppWebBrowser@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser@get_Parent$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrp6HWND__ @Shdocvw_tlb@TCppWebBrowser_V1@$bctr$qqrpv @Shdocvw_tlb@TCppWebBrowser_V1@CControlData @Shdocvw_tlb@TCppWebBrowser_V1@CreateControl$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@DEF_CTL_INTF @Shdocvw_tlb@TCppWebBrowser_V1@EventDispIDs @Shdocvw_tlb@TCppWebBrowser_V1@GetDefaultInterface$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoBack$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoForward$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoHome$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@GoSearch$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@InitControlData$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Navigate$qqrpbp10tagVARIANTt2t2t2 @Shdocvw_tlb@TCppWebBrowser_V1@OptParam @Shdocvw_tlb@TCppWebBrowser_V1@Refresh$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@Refresh2$qqrp10tagVARIANT @Shdocvw_tlb@TCppWebBrowser_V1@Stop$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Application$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Container$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Document$qqrv @Shdocvw_tlb@TCppWebBrowser_V1@get_Parent$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@ @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@$bctr$qqrp18Classes@TComponent @Shdocvw_tlb@TShellFavoritesNameSpace@BeforeDestruction$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@Connect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@ConnectTo$qqr89%TComInterface$27Shdocvw_tlb@IShellNameSpacepx5_GUID$e&@Shdocvw_tlb@IID_IShellNameSpace$% @Shdocvw_tlb@TShellFavoritesNameSpace@Disconnect$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDefaultInterface$qv @Shdocvw_tlb@TShellFavoritesNameSpace@GetDunk$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InitServerData$qqrv @Shdocvw_tlb@TShellFavoritesNameSpace@InvokeEvent$qqrir42System@%DynamicArray$t17System@OleVariant% __GetExceptDLLinfo ___CPPdebugHook _mfForm1

Name

.text

Size

268KB

Virtual Size

680KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

17KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.aspack

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

c870d429558429feb90acea25ab37873

generic